Red Hat Linux Security Advisories & CVEs
5197 advisories tracked · Red Hat Security Data API · direct feeds checked every minute; rate-limited backstops use a safe source cadence
Android app · Google Play
Monitor Linux CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.
Security advisories for your Linux release
Pick your distribution release to see every advisory issued for it and its severity mix. Fixes ship as errata — keep the system patched. This is the release's advisory history, not a per-package scan.
Official source
Red Hat Security Data API
Red Hat Enterprise Linux errata (RHSA) via the official Red Hat Security Data API — CVE severity, CVSS and affected packages. A credential-free official source.
Latest Linux advisories
High [CVE-2026-27802] Privilege Escalation via Unauthorized Bulk Permission Update
Privilege Escalation via Unauthorized Bulk Permission Update. Red Hat rates this important (CVSS 8.1). Weakness: CWE-266. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-0847] Arbitrary file read via path traversal vulnerability
Arbitrary file read via path traversal vulnerability. Red Hat rates this important (CVSS 7.5). Weakness: CWE-22. Affected package(s): rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9:1778263054, rhoai/odh-llama-stack-core-rhel9:1775144403, rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1778262893. Resolved in Red Hat advisory RHSA-2026:19712 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat OpenShift AI 2.25; Red Hat OpenShift AI 3.3; OpenShift Lightspeed; Red Hat Ansible Automation Platform 2; and 1 more.
High [CVE-2026-3520] Denial of Service via malformed requests
Denial of Service via malformed requests. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. Affected package(s): rhdh/rhdh-hub-rhel9:1774545605, rhdh/rhdh-hub-rhel9:1775140647. Resolved in Red Hat advisory RHSA-2026:6174 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Developer Hub 1.8; Red Hat Developer Hub 1.9.
High [CVE-2025-15558] Docker CLI for Windows: Privilege escalation via malicious plugin binaries
Docker CLI for Windows: Privilege escalation via malicious plugin binaries. Red Hat rates this important (CVSS 7.3). Weakness: CWE-427. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-23231] Privilege escalation or denial of service via use-after-free in nf_tables_addchain()
Privilege escalation or denial of service via use-after-free in nf_tables_addchain(). Red Hat rates this moderate (CVSS 7.5). Weakness: CWE-416. Affected package(s): kernel-rt, kernel. Resolved in Red Hat advisory RHSA-2026:10756 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
High [CVE-2025-71238] Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.
Linux kernel (qla2xxx): Double free vulnerability leads to denial of service and potential privilege escalation.. Red Hat rates this moderate (CVSS 7.3). Weakness: CWE-672. Affected package(s): kernel, kernel-rt. Resolved in Red Hat advisory RHSA-2026:9870 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 7.
Medium [CVE-2025-12801] rpc.mountd in the nfs-utils privilege escalation
rpc.mountd in the nfs-utils privilege escalation. Red Hat rates this moderate (CVSS 6.5). Weakness: CWE-279. Affected package(s): nfs-utils, rhcos, rhceph/rhceph. Resolved in Red Hat advisory RHSA-2026:5606 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 8; Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1.
Low [CVE-2026-2297] Logging Bypass in Legacy .pyc File Handling
Logging Bypass in Legacy.pyc File Handling. Red Hat rates this low (CVSS 3.3). Weakness: CWE-778. Affected package(s): python3.12, python3, python3.14, rhui5/rhua-rhel9:1779798222, rhui5/installer-rhel9:1779798165. Resolved in Red Hat advisory RHSA-2026:19019 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 9; Red Hat Enterprise Linux 1; Red Hat Enterprise Linux 8.
High [CVE-2026-27622] Arbitrary code execution via integer overflow in EXR file processing
Arbitrary code execution via integer overflow in EXR file processing. Red Hat rates this important (CVSS 7.4). Weakness: CWE-190. Affected package(s): openexr, rhaiis/vllm-rocm-rhel9:1778244531, OpenEXR, rhaiis/vllm-cuda-rhel9:1778274666, rhaiis/vllm-spyre-rhel9:1778244546, rhaiis/model-opt-cuda-rhel9:1778244559. Resolved in Red Hat advisory RHSA-2026:12339 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Enterprise Linux 8.2 Advanced Update Support; Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support; Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On; and 10 more.
High [CVE-2026-25673] Denial of Service via slow URL normalization on Windows
Denial of Service via slow URL normalization on Windows. Red Hat rates this important (CVSS 7.5). Weakness: CWE-770. No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3540] Inappropriate implementation in WebAudio
Inappropriate implementation in WebAudio. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3536] Integer overflow in ANGLE
Integer overflow in ANGLE. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3545] Insufficient data validation in Navigation
Insufficient data validation in Navigation. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3542] Inappropriate implementation in WebAssembly
Inappropriate implementation in WebAssembly. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3538] Integer overflow in Skia
Integer overflow in Skia. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3541] Inappropriate implementation in CSS
Inappropriate implementation in CSS. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3544] Heap buffer overflow in WebCodecs
Heap buffer overflow in WebCodecs. Red Hat rates this important (CVSS 8.8). No fix erratum has been published yet; monitor the Red Hat CVE page and apply the RHSA when released. Affected product named by the advisory: Red Hat Enterprise Linux.
Medium [CVE-2026-27601] Denial of Service via recursive data structures in flatten and isEqual functions
Denial of Service via recursive data structures in flatten and isEqual functions. Red Hat rates this moderate (CVSS 5.9). Weakness: CWE-606. Affected package(s): rhdh/rhdh-hub-rhel9:1777903262, rhdh/rhdh-hub-rhel9:1780930740, rhdh/rhdh-hub-rhel9:1776784286. Resolved in Red Hat advisory RHSA-2026:13826 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Enterprise Linux.
High [CVE-2026-3338] Signature bypass due to improper validation in PKCS7_verify()
Signature bypass due to improper validation in PKCS7_verify(). Red Hat rates this important (CVSS 7.5). Weakness: CWE-347. Affected package(s): rhtas/tuffer-rhel9:1773307309, rhtas/tuftool-rhel9:1773307309. Resolved in Red Hat advisory RHSA-2026:5459 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.3; Confidential Compute Attestation; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; and 2 more.
High [CVE-2026-3336] Certificate validation bypass via improper handling of PKCS7 objects
Certificate validation bypass via improper handling of PKCS7 objects. Red Hat rates this important (CVSS 7.5). Weakness: CWE-295. Affected package(s): rhtas/tuffer-rhel9:1773307309, rhtas/tuftool-rhel9:1773307309. Resolved in Red Hat advisory RHSA-2026:5459 — update the affected packages (`sudo dnf update`). Affected products named by the advisory: Red Hat Trusted Artifact Signer 1.3; Confidential Compute Attestation; Red Hat Enterprise Linux 10; Red Hat Enterprise Linux 9; and 2 more.